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DETAILED ACTION 

Claims 1-3, 5-15 and 17-18 remain pending. 
Claims 19 and 20 have been appended. 

* 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Response to Arguments 

The Applicants arguments filed on June 8, 2005 have been fully considered but are not 
persuasive. 

The Applicant states that the claims of the present invention are directed towards a 
different purpose and are not obvious in view of the prior art. 

Examiner responds that as per Ex parte Clapp, 227 USPQ 972 (Bd Pat App & Int) "To 
support conclusion that claimed combination is directed to obvious subject matter, the references 
must either expressly or impliedly suggest claimed combination or the examiner must present a 
convincing line of reasoning as to why artisan would have found claimed invention to have been 
obvious in light of the references teachings.", the Examiner states the reference deals with the 
generalized problem of conducting secure authentication and therefore would be obvious to a 
person of ordinary skill in the art. 

See following rejection. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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Claims 1-3, 5-15,17-19 are rejected under 35 U.S.C 103(a) as being unpatentable over Asay et al 
(US Patent 5,903,882) in view of Sudia et al (US Patent 6,209,091). 

As per claim 1 , 

Asay et al ('882) discloses in a system comprising: 

a root entity, the root entity maintaining a root certification authority adapted to 
issue a digital certificate to a first participant and a second participant, the root entity further 
maintaining a central repository;(Column 5, lines 1-27; figure 7) 

the first participant maintaining a first certification authority adapted to issue a digital 
certificate to a first customer;(Column 10, lines 27-36) 

the second participant maintaining a second certification authority adapted to issue a 
digital certificate to a second customer',(Column 10, lines 45-50) 

a method for providing authorization services, comprising: 

generating by the second customer an authorization request to confirm the 
authority of an individual to act on behalf of the first customer;(Column 5, lines 14-28) 

retrieving at the first participant information concerning the authority of the individual to 
act on behalf of the first customer and one or more nues for responding to the authorization 
request,(Column 12, linel7 through column 14 line 4) 

generating by the first participant an authorization response using the retrieved 
information and rules;(Column 12, line 17 through column 14 line 4; Figure 9) 

Asay et al ('882) does not explicitly disclose "transmitting the authorization request from 
the second customer to the second participant; transmitting the authorization request from the 
second participant to the first participant; transmitting the response from the first participant to 
the second participant; and transmitting the response from the second participant to the second 
customer.", Sudia et al ('091). discloses "transmitting the authorization request from the second 
customer to the second participant; transmitting the authorization request from the second 
participant to the first participant; transmitting the response from the first participant to the 
second participant; and transmitting the response from the second participant to the second 
customer.". ( Figure 7) It would have been obvious to one having ordinary skill in the art at the 
time the invention was made to combine the Asay et al ('882) method with the Sudia et al ('091) 
method in order in order to allow the second parties transaction to be finalized. 

As per claim 2, 

Asay et al ('882) discloses the method of claim 1, 

wherein the authorization request is a dynamic request. (Figure 7) 

As per claim 3, 

Asay et al ('882) discloses the method of claim 1, 

Official Notice is taken that "the authorization request is a static request" is common and 
well known in prior art in reference to digital authorization. It would have been obvious to one 
having ordinary skill in the art at the time the invention was made to utilize a static request 
because is a process that can by automated, thereby saving time and user expense. 



As per claim 5, 
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Asay et al ('882) discloses the method of claim 1, 

wherein access controls are implemented that limit the ability of the second customer to 
obtain a message format for the authorization request. (Figure 10) 

As per claim 6, 

Asay et al ('8 82) discloses the method of claim 1, 

wherein definition information is used in preparing the authorization response. (Column 
11, lines 15-31; Figure 11) 

As per claim 7, 

Asay et al ('882) discloses the method of claim 1, 

wherein mapping information is used in preparing the authorization response. (Column 
1 1 , lines 15-31; Figure 11) 

As per claim 8, 

Asay et al ('882) discloses the method of claim 7, 

wherein the mapping information comprises dynamic mapping information. (Figure 1 1) 
As per claim 9, 

Asay et al ('882) discloses the method of claim 1, 

wherein the authorization request seeks confirmation that the individual is authorized to 
purchase goods on behalf of the first customer. (Column 4, lines 24-27). 

As per claim 10, 

Asay et al ('882) discloses the method of claim 1, 

wherein the authorization request is bundled with a certificate validation request for the 
individual's certificate. (Figure 7) 

As per claim 1 1 , 

Asay et al ('882) discloses the method of claim 1, 

wherein the first participant checks the validity of the first customer's certifcate. (Column 
5, lines 1-28) 

As per claim 12, 

Asay et al ('882) discloses the method of claim 1, 

wherein the response indicates the status of the first customer's certificate. (Column 5, 
lines 44-51) 

Claims 13-15, and 17- 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Asay et al (US Patent 5,903,882) in view of Sudia et al (US Patent 6,209,091) and further 
in view of Greene et al. (US Patent 6,449,598). 



As per claim 1 3 



* > 
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Asay et al ('882) discloses a method for establishing an authorization service, 
comprising: 

presenting the proposed authorization service to a policy management authority by 
sending an electronic communication;(Figure 7) 

receiving approval of the proposed authorization service from the policy management 
authority, via an electronic communication whereby the proposed authorization service becomes 
an approved authorization service; and implementing the approved authorization service. (Figure 

3) 

Asay et al ('882) does not explicitly disclose "defining a proposed authorization 
service;", Sudia et al ('091). discloses "defining a proposed authorization service". ( Column 2, 
lines 25-29) It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to combine the Asay et al ('882) method with the Sudia et al ('091) method 
in order in order to promote secure commerce. 

Asay et al ('882) does not explicitly disclose "the proposed authorization service is 
developed by a participant and approved by the policy management authority before being 
offered to a customer.", Greene et al ( c 598). discloses "the proposed authorization service is 
developed by a participant and approved by the policy management authority before being 
offered to a customer ".( Column 8, lines 8-23) It would have been obvious to one having 
ordinary skill in the art at the time the invention was made to combine the Asay et al ('882) 
method with the Greene et al ('598) method in order in order to create more resilient policies. 

As per claim 1 4, 

Asay et al ('882) discloses the method of claim 13, 

wherein the proposed authorization service comprises a messaging specification and 
implementation rules. (Column 12, lines 17-67 - column 14 line 4) 

As per claim 15, 

Asay et al ('882) discloses the method of claim 13, 

wherein the proposed authorization service is jointly developed by a customer and its 
participant. (Column 10, lines 23-36) 

As per claim 1 7, 

Asay et al ('882) discloses the method of claim 13, 

wherein the policy management authority is associated with a root entity. (Figure 7) 
As per claim 18, 

Asay et al ('882) discloses the method of claim 13, 

wherein the approved authorization service is implemented within the context of a four- 
comer model. (Figure 2) 



Allowable Subject Matter 
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Claims 19-20 are objected to as being dependent upon a rejected base claim, but would 
be allowable if rewritten in independent form including all of the limitations of the base claim 
and any intervening claims. 

Conclusion 

Examiners note: Examiner has cited particular columns and line numbers in the 
references as applied to the claims above for the convenience of the applicant. Although the 
specified citations are representative of the teachings of the art and are applied to the specific 
limitations within the individual claim, other passages and figures may apply as well. It is 
respectfully requested from the applicant in preparing responses, to fully consider the references 
in entirety as potentially teaching all or part of the claimed invention, as well as the context of 
the passage as taught by the prior art or disclosed by the examiner. 

Any inquiry of a general nature or relating to the status of this application or concerning 
this communication or earlier communications from the examiner should be directed to John 
Winter whose telephone number is (571) 272-6713. The Examiner can normally be reached on 
Monday- Friday, 9:30am-5:00pm. If attempts to reach the examiner by telephone are 
unsuccessful, the Examiner's supervisor, James Trammell can be reached at (571) 272-6712. 
Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be 
obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://portal.uspto.gov/external/portal/pair . Should you have questions on access to 
the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 

Washington, D.C 20231 

or faxed to: 

(571) 273-8300 [Official communications; including After Final communications labeled 
"BoxAF"] 



Dulany 

JMW 
August 




